Skip to content

Commit

Permalink
Merge pull request #46 from gematik/publishInternalRelease-37
Browse files Browse the repository at this point in the history
Publish Release 4.12.0
  • Loading branch information
serdarde authored Aug 19, 2024
2 parents 4f362ea + 582a337 commit 2d0f879
Show file tree
Hide file tree
Showing 108 changed files with 7,586 additions and 4,773 deletions.
3 changes: 1 addition & 2 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -65,8 +65,7 @@ Github-Release.Jenkinsfile


# we don't want to release the credential scripts now
/credential-distribution/README.md
/credential-distribution/store-credential.ps1
/credential-distribution/facade-poc

# we don't want to release the certificates
/src/assets/certs-idp/RCA2_KOMPCA24.pem
Expand Down
13 changes: 13 additions & 0 deletions .gitlab/merge_request_templates/MR-Template.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
## Description

This is the merge request template for the authenticator.
The checks here are a reminder and not mandatory.
It is not possible to block or hinder the merge request
by interacting with this template.

## Merge Request Checklist:

- [ ] ReleaseNotes.md has been updated
- [ ] Thought about if the merge leads to documentation changes

## Happy Merging :)
3 changes: 3 additions & 0 deletions .ncurc.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
{
"reject": ["got","sweetalert2", "query-string", "eslint", "axios","@typescript-eslint/eslint-plugin", "@typescript-eslint/parser"]
}
44 changes: 44 additions & 0 deletions Dependency-Updates.Jenkinsfile
Original file line number Diff line number Diff line change
@@ -0,0 +1,44 @@
@Library('gematik-jenkins-shared-library') _

def BRANCH_NAME = 'dependency-updates'
def REPO = 'https://gitlab.prod.ccs.gematik.solutions/git/authenticator/authenticator.git'
def CREDENTIAL_ID_GEMATIK_GIT = 'svc_gitlab_prod_credentials'
def mergeRequestTitle = 'Dependency Updates'
pipeline {

options {
disableConcurrentBuilds()
buildDiscarder logRotator(artifactDaysToKeepStr: '', artifactNumToKeepStr: '', daysToKeepStr: '', numToKeepStr: '5')
}

agent { label 'k8-web' }

stages {
stage('Run Dependency Updates') {
steps {
// get correct branch and assure, we are on HEAD
sh "git switch -C ${BRANCH_NAME}"
sh "git pull --no-rebase origin ${BRANCH_NAME} || true" // or true if branch is not existing

// adjust package.json
sh "npx npm-check-updates --configFileName=.ncurc.json -u"
script {
try {
// adjust package-lock.json
sh "npm install"
} catch (error) {
echo "Error running npm install ${error}"
// npm install has issues, probably compatibility issues
mergeRequestTitle = mergeRequestTitle + ' - with Errors'
}
}

// Add changes
sh "git add package.json package-lock.json"
sh "git commit -m'Update dependencies' || true" // or true if all changes are already on the branch
sh "git push origin ${BRANCH_NAME}"
gitCreateMergeRequest(BRANCH_NAME, 'master', mergeRequestTitle)
}
}
}
}
12 changes: 9 additions & 3 deletions LICENSE.txt
Original file line number Diff line number Diff line change
Expand Up @@ -397,9 +397,6 @@ Drittsoftwareanteile:
Komponente: axios
Lizenz: MIT

Komponente: is-fqdn
Lizenz: MIT

Komponente: lodash
Lizenz: MIT

Expand All @@ -408,3 +405,12 @@ Drittsoftwareanteile:

Komponente: validator
Lizenz: MIT

Komponente: is-valid-domain
Lizenz: MIT

Komponente: mac-ca
Lizenz: BSD-3-Clause

Komponente: win-ca
Lizenz: MIT
98 changes: 67 additions & 31 deletions ReleaseNotes.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,30 +2,64 @@

# Release Authenticator

## Version 4.12.0

### Added

- ECC support for HBA and SMC-B (starting from G2.1), ECC signing in Mock-Mode, No support for ECC TLS to the connector
- Improved logging messages for SMC-B card login
- SMC-B PIN verification without requesting it in the authenticator
- Use Windows and Mac OS certificate stores for certificate validation
- Display invalid certificates in function tests
- Enhanced user experience by indicating unsaved changes in the settings form
- Automatic copying of test-cases.json and certificates to appropriate locations on macOS

### Fixed

- Implemented hard-coded log steps to avoid duplication
- Timeout parameter now accepts only positive values
- Authentication flow now cancels pending second flow if the first flow encounters an error
- Default timeout parameter set to 30 seconds (30000ms)
- Reduced auto-update log entries
- Relevant error messages now displayed when connector connection fails
- Fixed bug related to directory creation during save actions

### Security

- Replaced dependency `is-fqdn` with `is-valid-domain` to prevent security vulnerabilities
- Limited exposure of environment variables to only the necessary ones
- Updated dependencies for enhanced security


## Version 4.11.0

### added
### Added

- Action-Buttons on the Settings-Screen now stay in the view while scrolling in order to enhance our UX
- Set default connector port to 443
- Default-configuration feature


### fixed
### Fixed

- Prioritize the read environment variable logic to read the correct config.json file on startup
- Clean application files properly after uninstalling

### security
- Prevent starting Authenticator with remote-debugging parameters
### Security

- Prevent starting Authenticator with remote-debugging parameters

## Version 4.10.0
### added

### Added

- Hover-Effect to the navigation bar and renaming "Anmeldung" to "Home" for an improved UX
- New certificate for connectors
- Functionality test for HBA usage
- Option to disable IdP TLS verification in Mock Mode

### fixed
### Fixed

- The "ClientView-Machine-Name"-variable is now being read properly
- Error handling improved for incorrectly formatted config files
- Save target directory for certificates has been fixed for central configuration
Expand All @@ -34,7 +68,8 @@

## Version 4.9.0

### added:
### Added:

- Migration for credentials from config.json to windows Credential Manager (only Standalone Installation)
- UserConsent dialog
- Input validation for proxy settings and allow-list
Expand All @@ -44,17 +79,18 @@
- Prod and Mock Version now both are signed
- Customisable timeout option for HTTP requests

### fixed:
### Fixed:

- Using axios as the HTTP client instead of fetch
- Config.json is now more readable
- Config.json is now more readable
- Log-File is now more readable

### security
### Security

- change Nodejs to Version 20
- Prod version no longer contains mock codes
- New signing certificate for Windows


## Version 4.8.1

### bugfix
Expand All @@ -64,7 +100,7 @@

## Version 4.8.0

### added
### Added

- Deactivation of OS proxy settings now requires mandatory Proxy Address and Port fields entries
- IP Validation added for Proxy Ignore List in Settings Page
Expand All @@ -82,7 +118,7 @@

## Version 4.7.0

### added
### Added

- Introduced XenDesktop support
- Added asterisks support for the Proxy setting "kein Proxy für"
Expand All @@ -102,7 +138,7 @@
- Correctly parsed string boolean values to actual booleans
- Removed redundant vue.config.js file from the project

### security
### Security

- Each HBA now has a unique UserID

Expand Down Expand Up @@ -243,7 +279,7 @@ fixed:

## Version 3.1.0 (2023-02-06)

### added:
### Added:

- Support own proxy ignore list
- Hide the release number info in the Authenticator App and show it only per tooltip
Expand All @@ -254,7 +290,7 @@ fixed:
Authenticator\resources\certs-konnektor)*
are valid and in the correct file format

### fixed:
### Fixed:

- Citrix
- App crashes if the config directory doesn't exist
Expand All @@ -275,33 +311,33 @@ fixed:
- Wrong ProxyAgent for destination address
- Disabled false http 302 redirect to browser

### security:
### Security:

- Do not log sensitive data in the mock version
- Unauthenticated degradation of local availability (z.B.: DoS with CURL)

## Version 3.0.1 (2022-12-08)

### fixed:
### Fixed:

- Added userAgent to request headers on IDP

## Version 3.0.0 (2022-11-30)

### added:
### Added:

- Central configuration option for decentralized installations
- Configurable auto-update function
- Conformance check for certificate-based authentication

### fixed:
### Fixed:

- Better protection against man-in-the-middle attacks
- Domain specific error management

## Version 2.4.0 (2022-10-17)

### added:
### Added:

- UI/UX Optimization:
- Removal the scroll function
Expand All @@ -311,13 +347,13 @@ fixed:
- Optimized log output for the error log level
- Improvement of functional tests

### fixed:
### Fixed:

- Disabled the option to open a new instance of the authenticator via hotkey

## Version 2.3.0 (2022-09-15)

### added:
### Added:

- UI/UX Improvement for the function test and checking the input fields
- UI/UX Paths of the key and the certificate readable by mouseover
Expand All @@ -328,32 +364,32 @@ fixed:
- Optimized log output: including ISO format for time stamps
- Add Tailwind to package.json

### fixed:
### Fixed:

- No permanent caching of the connector.sds
- missing User-Agent
- further Bugfixes

### security:
### Security:

- Scheme validation of the redirect_uri

## Version 2.2.0 (2022-07-29)

### added:
### Added:

- Proxy-Agent
- User-Agent

### fixed:
### Fixed:

- change of focus
- Code-Refactoring
- Error code display

## Version 2.1.0 (2022-07-08)

### added:
### Added:

- *Organspenderegister-IDP* and central IDP mock mode for developers and testers
- Extension of the authenticator with a local web server endpoint as an alternative to the deep link
Expand All @@ -363,7 +399,7 @@ fixed:

## Version 2.0.0 (2022-06-20)

### added:
### Added:

- Central IDP service support: https://idp-ref.app.ti-dienste.de
- Brainpool curve support (brainpoolP256r1)
Expand All @@ -373,7 +409,7 @@ fixed:

## Version 1.0.1 (2022-03-04)

### added:
### Added:

- For OGR
- Improved error handling related to connectors
Expand All @@ -384,7 +420,7 @@ fixed:
- Unnecessary SOAP responses no longer appear in the log
- Improved designations of the input fields in the settings menu

### fixed:
### Fixed:

- Remote VerifyPIN

15 changes: 15 additions & 0 deletions builder.config.js
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,7 @@ const artifactName = (productName, version, ext) => {
* Always be sure that the signed exe contains this string as CN.
*/
const PUBLISHER_NAME = 'gematik GmbH';
const TEST_CASES_JSON_FILE_NAME = 'test-cases-config.json';

/**
* @type {import("electron-builder").Configuration}
Expand Down Expand Up @@ -66,6 +67,20 @@ module.exports = {
artifactName: artifactName('${productName}', '${version}', '${ext}'),
icon: './src/assets/logo.png',
appId: 'de.gematik.authenticator',
extraResources: [
{
from: './src/assets/certs-idp',
to: 'certs-idp',
},
{
from: './src/assets/certs-konnektor/ca/pu/rsa',
to: 'certs-konnektor',
},
{
from: './src/assets/' + TEST_CASES_JSON_FILE_NAME,
to: './',
},
],
},
directories: {
buildResources: 'src/assets',
Expand Down
Loading

0 comments on commit 2d0f879

Please sign in to comment.